> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flexxible.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Change ARSO configuration

On devices running Windows 10 1903+, Automatic Restart Sign-On (ARSO) is a feature that allows a user to sign in automatically after a system restart, especially after installing updates.

Windows temporarily stores the user's credentials in Credential Manager and uses them to restore the session. However, to maintain security, even though the session is restored automatically, the device remains locked and requires the user to unlock it with their PIN, password, or biometric authentication.

ARSO can cause sessions to appear in the sessions view as if they were established, when in fact no user is actually working on the device. To prevent this, you can disable this feature.

## Disable ARSO configuration on a device

To disable ARSO:

1. GPO

   **Computer Configuration** → **Administrative Templates** → **Windows Components** → **Windows sign in Options**

2. Registry edit

   `HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableAutomaticRestartSignOn = 1 (DWORD)`

3. Microsoft Intune policy

   * Platform: Windows 10 and later
   * Profile type: Administrative Templates
   * Path: `\Windows Components\Windows Logon Options`

More information: [https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/component-updates/winlogon-automatic-restart-sign-on--arso-#policy-1](https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/component-updates/winlogon-automatic-restart-sign-on--arso-#policy-1)